gistfile1.txt

curl -A "avada-user-agent" -IL https://updates.theme-fusion.com/?avada_action=get_download&item_name=LayerSlider%20WP&nonce=e0044834ed&t=1581500645&ver=6.2.0

[1] 86798
[2] 86799
[3] 86800
[4] 86801
[2]   Done                    item_name=LayerSlider%20WP
[3]   Done                    nonce=e0044834ed
filip:Avada filip$ HTTP/2 200
date: Wed, 12 Feb 2020 10:23:07 GMT
content-type: text/html; charset=UTF-8
set-cookie: __cfduid=dccfbfc793ea465014f935733e8bd3d111581502986; expires=Fri, 13-Mar-20 10:23:06 GMT; path=/; domain=.theme-fusion.com; HttpOnly; SameSite=Lax
vary: Accept-Encoding
link: <https://updates.theme-fusion.com/wp-json/>; rel="https://api.w.org/"
x-powered-by: WP Engine
x-cacheable: SHORT
vary: Accept-Encoding,Cookie
cache-control: max-age=600, must-revalidate
x-cache: HIT: 4
x-pass-why:
x-cache-group: normal
cf-cache-status: DYNAMIC
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
server: cloudflare
cf-ray: 563dd8618ce18cb6-VIE

gistfile2.txt

curl -A "avada-user-agent" -IL https://updates.theme-fusion.com/

HTTP/2 200
date: Wed, 12 Feb 2020 10:23:39 GMT
content-type: text/html; charset=UTF-8
set-cookie: __cfduid=d243961c769b99df8570c58e2ef31dc381581503018; expires=Fri, 13-Mar-20 10:23:38 GMT; path=/; domain=.theme-fusion.com; HttpOnly; SameSite=Lax
vary: Accept-Encoding
link: <https://updates.theme-fusion.com/wp-json/>; rel="https://api.w.org/"
x-powered-by: WP Engine
x-cacheable: SHORT
vary: Accept-Encoding,Cookie
cache-control: max-age=600, must-revalidate
x-cache: HIT: 3
x-pass-why:
x-cache-group: normal
cf-cache-status: DYNAMIC
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
server: cloudflare
cf-ray: 563dd92cbafafcb1-VIE

gistfile3.txt

curl -A "avada-user-agent" -IL https://updates.theme-fusion.com/?avada_action=get_download&item_name=LayerSlider%20WP&nonce=e0044834ed&t=1581500645&ver=6.1.0

[1] 86930
[2] 86931
[3] 86932
[4] 86933
filip:Avada filip$ HTTP/2 200
date: Wed, 12 Feb 2020 10:25:28 GMT
content-type: text/html; charset=UTF-8
set-cookie: __cfduid=ddf64b43d9785d6b9d15261f3f8b16e311581503128; expires=Fri, 13-Mar-20 10:25:28 GMT; path=/; domain=.theme-fusion.com; HttpOnly; SameSite=Lax
vary: Accept-Encoding
link: <https://updates.theme-fusion.com/wp-json/>; rel="https://api.w.org/"
x-powered-by: WP Engine
x-cacheable: SHORT
vary: Accept-Encoding,Cookie
cache-control: max-age=600, must-revalidate
x-cache: HIT: 5
x-pass-why:
x-cache-group: normal
cf-cache-status: DYNAMIC
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
server: cloudflare
cf-ray: 563ddbd85fe6594c-VIE